CVE-2026-10876: SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict access to the application’s /admin/ area to trusted networks or users—e.g. allowlisting management IPs at the firewall, place /admin/ behind a VPN or reverse proxy, and/or apply WAF rules to block unauthorized requests targeting /admin/.
- Operational
Audit and monitor for abuse of the /admin/ interface: review web server and application logs for suspicious access to /admin/, investigate indicators of compromise, and if compromise is suspected perform recovery actions such as rotating credentials, removing unauthorized accounts, and restoring affected components from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10876?
CVE-2026-10876 has a medium severity score of 6.3.
How do I fix CVE-2026-10876?
To fix CVE-2026-10876, ensure that proper authorization mechanisms are in place for the affected function in the admin panel.
What are the potential risks of CVE-2026-10876?
CVE-2026-10876 may allow unauthorized access to administrative functions, leading to data exposure or manipulation.
Can CVE-2026-10876 be exploited remotely?
Yes, CVE-2026-10876 can be exploited remotely if the improper authorization is not mitigated.
Which software is affected by CVE-2026-10876?
CVE-2026-10876 affects SourceCodester Ship Ferry Ticket Reservation System version 1.0.